WordPress plugin
Swatchly – Product Variation Swatches for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All Swatchly – Product Variation Swatches for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.4.13Update to 1.4.14 | CVE-2026-66605 | |
| Medium6.5 | 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update 1.2.8 – 1.4.0Update to 1.4.1 | CVE-2025-2719 | |
| Medium4.3 | Cross-Site Request Forgery via plugin_activation ≤1.2.0Update to 1.2.1 | CVE-2023-23792 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.13Update to 1.4.14
- Medium6.51.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
1.2.8 – 1.4.0Update to 1.4.1
- Medium4.3Cross-Site Request Forgery via plugin_activation
≤1.2.0Update to 1.2.1
Swatchly – Product Variation Swatches for WooCommerce: common questions
Does Swatchly – Product Variation Swatches for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Swatchly – Product Variation Swatches for WooCommerce: 1 high, 2 medium. None are known to affect version null.
How do I check which version of Swatchly – Product Variation Swatches for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Swatchly – Product Variation Swatches for WooCommerce vulnerability?
CVE-2026-66605, published Aug 19, 2026: Swatchly – Product Variation Swatches for WooCommerce <= 1.4.13 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Swatchly – Product Variation Swatches for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Swatchly – Product Variation Swatches for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.